Re: GSS-API SRP mech (was Re: retrying keyex ...)

[Markus Friedl <markus%openbsd.org@localhost>]

On Thu, Jul 17, 2003 at 12:31:20PM -0700, Tom Wu wrote:
> With the patched OpenSSH, since it includes a 
> hash of the public key inside the SRP verification messages, it would 
> cause authentication to fail, thwarting the MITM attack.

I don't see how this is an improvement over pubkey auth, since
it allows you to detect a MITM attack as well.